cyberedge-observe-certificates
Collect and inspect TLS leaf certificates for an explicitly authorized CyberEdge scope. Use only when an authorization reference already exists and active service discovery is permitted.
适合你,如果需要定期检查 TLS 证书的有效性和安全性
npx oh-my-skill add symph0nia/cyberedge/cyberedge-observe-certificatescurl -fsSL https://oh-my-skill.com/install.sh | bash -s -- symph0nia/cyberedge/cyberedge-observe-certificatesnpx oh-my-skill verify symph0nia/cyberedge/cyberedge-observe-certificates怎么用
商店整理自技能原文 · 版本 0af016f · 表述以原文为准安装此技能后,Claude 可以收集指定授权范围内的 TLS 叶子证书,执行扫描、搜索证书并生成包含主题、颁发者、SAN、有效期和 SHA-256 指纹的观察报告。
当用户有一个已存在的授权引用(authorization_ref)且允许主动服务发现时,请求检查特定 scope 的 TLS 证书即可触发。
技能原文 SKILL.md
CyberEdge Observe Certificates
Use cyberedge-agent as the only control-plane interface. Humans do not operate this bridge directly.
Preconditions
- Require an existing Scope with a non-empty
authorization_refcovering every target. - Require the exact Skill grant
cyberedge-observe-certificateswithscan.active. - Never widen a Scope, accept arbitrary ports, invoke an external scanner, or bypass RPC policy.
Workflow
- Call
start_scanwith the authorizedscope_idandpolicy_service_baseline. - Watch or read the Task until it reaches a terminal state.
- Call
search_certificateswith the samescope_id. - Call
get_task_reportto correlate each Certificate with itstls.certificateObservation and DER Evidence. - Treat Subject, Issuer, SAN and validity fields as observations. Report the SHA-256 fingerprint when identifying a certificate.
The policy probes TLS only on open baseline HTTPS ports 443 and 8443. A handshake or parse failure is retained as tls.error; it must not be presented as evidence that no certificate exists.
Machine envelope
Send one JSON object on standard input. Required common fields are request_id, idempotency_key, agent_id, skill_name, and skill_version.
{"request_id":"req-1","idempotency_key":"idem-1","agent_id":"codex-main","skill_name":"cyberedge-observe-certificates","skill_version":"0.1.0","action":"search_certificates","scope_id":"scope-id"}